Data processing apparatus, control method, and program

ABSTRACT

A data processing apparatus determines whether or not administrator authority of a user is set, and whether access is made locally or from the network. When the access is made locally, even if the user has the administrator authority, folders of all users are not displayed. The folders of all users are displayed only when the user having the administrator authority accesses from the network.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a Continuation of U.S. application Ser. No.13/225,267 filed Sep. 2, 2011 which claims priority from Japanese PatentApplication No. 2010-201995 filed Sep. 9, 2010, all of which are herebyincorporated by reference herein in their entirety.

BACKGROUND OF THE INVENTION

Field of the Invention

The present invention relates to a data processing apparatus having astorage device that stores data such as a file or a folder, capable ofdisplaying information relating to the data stored in the storage devicein response to requests from a plurality of users, a control method, anda program.

Description of the Related Art

A data processing apparatus having a storage device such as a hard diskdrive is generally well known. As an example of a data processingapparatus, there is a multi functional peripheral (MFP) having a scanfunction and a print function. The MFP performs a scan operation forstoring image data, as a file, generated by scanning a document and aprint operation for printing an image based on a file stored in afolder. The scan operation or the print operation in the MFP isgenerally instructed to be performed by a user via an operation unitprovided for the MFP.

Recently, data processing apparatuses having a storage device have beenoperated as file servers by using a file sharing protocol such as aserver message block (SMB). When a data processing apparatus is operatedas a file server, easy access is realized from an external device whichis connected by the Internet or local area network (LAN) to the storagedevice in the data processing apparatus. Further, a file can be storedin the storage device of the data processing apparatus from the externaldevice (so a file can be transferred from an external device to thestorage device of the data processing apparatus).

The data processing apparatus having the storage device is shared(accessed) by a large number of users. Therefore, the number of files orfolders (hereinbelow, a file or folder is also generically referred toas an object) stored in the storage device may increase enormously. Asthe number of objects becomes larger it is harder to find the object,which is an operation target (so the file or folder required by theuser), from a list of a plurality of objects thereby inconveniencing theuser.

As discussed in Japanese Patent Application Laid-Open No. 2009-252154,when a user requests a list of objects to be displayed, all storedobjects are not displayed but only an object having a relation to theuser who requests a list of objects is displayed. As a consequence, theobject which is the operation target is easily found from the list of aplurality of objects. Specifically, for each user access authority isset for a plurality of objects stored in the storage device. Only theobjects for which the access authority has been set are displayed to theuser who requests the list of objects. By preventing the display of anobject having a relation to another user, only the user's requiredobjects are displayed and the target object is easily found.

When a data processing apparatus is operated as a file server, the userhaving administrator authority may need to delete an unnecessary file ofother users or perform maintenance such as virus check. Morespecifically, the user having the administrator authority needs toaccess not only their own objects stored in the storage device but alsoan object having a relation to other users. Therefore, in response to adisplay request from the user having the administrator authority, theobjects related to other users are also displayed.

SUMMARY OF THE INVENTION

The present invention solves the following problems.

It is presumed that a user having administrator authority can also usean original function (e.g., scan or print function) of a data processingapparatus via an operation screen of the data processing apparatus. Whenthe user having the administrator authority requests folder informationusing an operation unit in the data processing apparatus, for example,if not only the user's own objects but also the or each object of otherusers are displayed, the object which is an operation target is noteasily found. Thus, referring to Japanese Patent Application Laid-OpenNo. 2009-252154, which discloses changing the display depending on thesetting or non-setting of the access authority, the display cannot beproperly switched between using the original function (e.g., scan orprint function) of the data processing apparatus and using the dataprocessing apparatus as a file server.

The present invention is directed to properly switching the display ofan object depending on whether a user is capable of operating an objectrelated to another user, and depending on whether or not a user performsan operation on an operation screen of a data processing apparatus.

According to an aspect of the present invention, a data processingapparatus having access to a storage unit includes a reception unitconfigured to receive a request for displaying a list of a plurality ofobjects stored in the storage unit, a user determination unit configuredto determine whether the received request is from a user capable ofoperating an object related to another user, a network determinationunit configured to determine whether the received request was issuedusing a network communication protocol, a display unit, and a controlunit configured to send data corresponding to the requested list of theplurality of objects to an external device from which the requestoriginated, in the case that the user determination unit determines thatthe request is from the user capable of operating the object related tothe other user and the network determination unit determines that thereceived request was issued using a network communication protocol, andconfigured to select the or each object related to the requesting userfrom among the list of the plurality of objects and to display a list ofthe or each selected object on the display unit, in the case that theuser determination unit determines that the request is from the usercapable of operating the object related to the other user and thenetwork determination unit determines that the received request was notissued using a network communication protocol.

According to the present invention, in the case that a user capable ofoperating an object related to another user requests to display a listof objects, the display of the list of objects is switched depending onthe request source. Preferably, when the display is requested by anexternal device on a network, for example under an environment easilyoperable compared with the operation screen of the data processingapparatus, the object of another user can be operated. Preferably, whenthe display is requested via the operation unit of the data processingapparatus (so is requested locally), it is also possible for the userhaving the administrator authority to use the original function of thedata processing apparatus without deteriorating operability.

Further features and aspects of the present invention will becomeapparent from the following detailed description of exemplaryembodiments with reference to the attached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings, which are incorporated in and constitute apart of the specification, illustrate exemplary embodiments, features,and aspects of the invention and, together with the description, serveto explain the principles of the invention.

FIG. 1 illustrates a block diagram of a hardware configuration of a dataprocessing system according to the first exemplary embodiment.

FIG. 2 illustrates a block diagram of a software configuration of a dataprocessing apparatus according to the first exemplary embodiment.

FIG. 3 illustrates a schematic diagram of access control of a file and afolder stored in a storage device according to the first exemplaryembodiment.

FIG. 4 illustrates a data structure of information stored in a userdatabase (DB) of the storage device according to the first exemplaryembodiment.

FIG. 5 illustrates a flowchart of processing in response to a request offolder information in the data processing apparatus according to thefirst exemplary embodiment.

FIGS. 6A to 6D illustrate examples of an operation screen of anoperation unit or a display device according to the first exemplaryembodiment.

FIG. 7 illustrates a flowchart of processing in response to an operationreceived via the operation screen in the data processing apparatusaccording to the first exemplary embodiment.

FIG. 8 illustrates the operation screen in the data processing apparatusdisplayed when a user having administrator authority requests folderinformation in a local access request according to the first exemplaryembodiment.

FIG. 9 illustrates a block diagram of a software configuration of a dataprocessing apparatus according to according to the second exemplaryembodiment.

FIGS. 10A to 10C illustrate events in the data processing apparatusaccording to the second exemplary embodiment.

FIGS. 11A to 11B illustrate a flowchart of processing in response to arequest of folder information in a data processing apparatus accordingto the third exemplary embodiment.

FIGS. 12A to 12E illustrate examples of information of a folder listgenerated by the data processing apparatus according to the thirdexemplary embodiment.

FIG. 13 illustrates an operation screen displayed when a user havingadministrator authority sends a local access request for folderinformation.

DESCRIPTION OF THE EMBODIMENTS

Various exemplary embodiments, features, and aspects of the inventionwill be described in detail below with reference to the drawings.

First of all, a description is given of a configuration of a dataprocessing system including a data processing apparatus and an externaldevice according to the first exemplary embodiment.

FIG. 1 illustrates a block diagram of a configuration of the dataprocessing apparatus and the external device according to the presentexemplary embodiment.

In the data processing system in FIG. 1, a data processing apparatus 1is connected to an external device 2 via a network.

The external device 2 is a personal computer (PC), and can access thedata processing apparatus 1 from outside the data processing apparatus1.

The data processing apparatus 1 is exemplified as an image formingapparatus in the present embodiment and in particular as a multifunction peripheral (MFP) having a plurality of functions from the groupconsisting of a scan function, a print function, a facsimile (FAX)function, and an email sending function.

A control unit 100 controls the data processing apparatus 1. A centralprocessing unit (CPU) 101 is an arithmetic operation device thatcontrols the entire system. A system bus 111 connects the CPU 101, arandom access memory (RAM) 102, a read-only memory (ROM) 103, a harddisk drive (HDD) 104, an operation unit interface (I/F) 105, a deviceinterface (I/F) 107, and a network interface (I/F) 110. The RAM 102 is asystem work memory for operating the CPU 101, and is also an imagememory for temporarily storing image data. A program such as anoperating system (OS), system software, or application software isloaded to the RAM 102. The ROM 103 stores a system boot program.Further, the ROM 103 stores a system program or an application program.Moreover, the ROM 103 stores information, such as font, necessary forthe data processing apparatus 1. The HDD 104 stores the OS, the systemsoftware, the application software, and the image data. According to thepresent exemplary embodiment, the HDD 104 includes a shared folder. Theprogram stored in the RAM 102 is executed by the CPU 101, and processesthe image data stored in the RAM 102, the ROM 103, or the HDD 104 or anexecution command.

A data processing apparatus with small size may not have the HDD 104,but store the system software or application software to the ROM 103 toform a configuration without a hard disk drive. Alternatively, in placeof the HDD 104, a storage device, e.g., a flash memory such as a solidstate disk (SSD) may be used. In this case, the shared folder is formedin the SSD mounted on the apparatus in place of the HDD 104. The dataprocessing apparatus 1 may be a personal computer (PC) or a server onthe network.

The control unit 100 includes the operation unit I/F 105, the device I/F107, and the network I/F 110. The operation unit I/F 105 is connected toan operation unit 106. The operation unit 106 includes a display devicesuch as a touch panel for informing a state of the data processingapparatus 1, which is integrated with an operation button for issuing aninstruction to the data processing apparatus 1. The device I/F 107connects a scanner 108 or a printer 109 as an image input/output deviceto the control unit 100, and inputs or outputs the image data. The imagedata input via the device I/F 107 from the scanner 108 is stored in theRAM 102 or the HDD 104. The stored image data is subjected to imageprocessing by the application program stored in the RAM 102 ifnecessary. When outputting the image data, the image data is output tothe printer 109 via the device I/F 107. The network I/F 110 is connectedto a local area network (LAN), and inputs or outputs the image data orinformation for controlling the data processing apparatus 1.

In the case of the data processing apparatus 1 having a facsimile (FAX)function, an interface (I/F) for a modem device (not illustrated inFIG. 1) may be provided in the control unit 100 and may be connected toa public line by a modem to enable FAX transmission.

Although not illustrated in FIG. 1, the data processing apparatus 1 mayinclude an interface for reading data from an external storage mediumsuch as a universal serial bus (USB) I/F, and may read and print datastored in a flash memory card.

A description is given of a software configuration of the dataprocessing apparatus 1 according to the first exemplary embodiment withreference to FIG. 2. The data processing apparatus 1 includes a networkserver 201, application 213, an authentication control unit 203, and adata access processing section 204. To perform the functions, theprogram stored in the HDD 104 or the ROM 103 is loaded to the RAM 102and the program is executed by the OS.

The network server 201 is a module that executes a network serverfunction of the data processing apparatus 1. The network server functionis used for accessing data stored in a storage device 215 in the dataprocessing apparatus 1 from the external device 2 such as the PC.Further, the network server function is used for receiving packet datafor printing data transmitted from the external device 2. According tothe present exemplary embodiment, the storage device 215 corresponds toa part of the HDD 104. Communication with the external device 2 isperformed under a protocol corresponding to a processing function. Thenetwork server 201 includes a file server function for sharing a fileunder a server message block (SMB) protocol to function as a file serverby sharing data in the storage device 215 in the data processingapparatus 1. Specifically, the network server 201 includes acommunication control unit 205, a protocol analysis unit 206, a protocolgeneration unit 207, and a network access control unit 208.

The communication control unit 205 receives packet data via the networkI/F 110 when the apparatus is accessed from the external device 2 viathe network. The communication control unit 205 determines the protocolof the received packet data, and requests the protocol analysis unit 206to conduct an analysis. The communication control unit 205 interprets aprotocol up to an underlying layer such as a transmission controlprotocol (TCP)/Internet Protocol (IP) or a user datagram protocol (UDP).The protocol analysis unit 206 analyzes a protocol, such as a filesharing protocol, of an upper layer of the TCP/IP. Referring to FIG. 2,although the number of the protocol analysis unit 206 is one, a protocolanalysis unit may be prepared for each protocol. When a plurality ofprotocol analysis units is prepared, the communication control unit 205needs to change the request destination of the analysis depending on theprotocol.

The protocol analysis unit 206 analyzes a protocol type, and notifiesthe network access control unit 208 of an analysis result. The analysisresult of the protocol analysis unit 206 includes information indicatingto which module the processing is requested.

The protocol generation unit 207 notifies the communication control unit205 of a processing result received from network access control unit208. The network access control unit 208 requests folder informationstored in the storage device 215, or accesses data in the storage device215. The request of the folder information is a request for acquisitionof information (hereinafter, simply referred to as “folder information”)about a folder or a file included in a designated folder. The folderinformation may include for example a folder type, a folder name, datasize, and information on updating date. Alternatively the request may befor acquisition of “file information” about a designated file includinge.g., a file name, a file format, a creator of the file, or updatingdate of the file.

The data access processing section 204 writes or reads the data (e.g.files and folders) stored in the storage device 215. Further, the dataaccess processing section 204 not only writes or reads the data, butalso obtains the file information or folder information.

Specifically, the data access processing section 204 includes a requestreception unit 216, a data processing unit 217, and a data access unit218. The request reception unit 216 receives a request of the fileinformation or folder information from the network access control unit208 and a local access control unit 212, and sends back the fileinformation or folder information. The data processing unit 217 checksaccess authority of the file or folder stored in the storage device 215,and performs access control or information processing. The data accessunit 218 accesses the storage device 215, and executes the reading andwriting to/from the file. Although only one storage device 215 isillustrated in FIG. 2, a plurality of the storage devices 215 can beswitched depending on a storage position of the file requested from thenetwork server 201. When data is stored in the data processing apparatus1 thereof, the data is stored in the HDD 104. However, when data isstored in a device on an external network, the data is stored in theexternal device via the network I/F 110.

The authentication control unit 203 stores a user name, a password, andauthority for accessing the storage device 215 in the data processingapparatus 1, in a user database (DB) 214. The authentication controlunit 203 checks whether the user name and the password received from thenetwork access control unit 208 or the local access control unit 212 arecorrect. When the user name and the password are correct, theauthentication control unit 203 sends back the authority of the user.

The application 213 is a program module that executes the function ofthe data processing apparatus 1. There are various applications forfunctions, such as application of a copy function for copying read dataand application of a function for storing the read data in the storagedevice 215. Referring to FIG. 2, the application is generalized as theapplication 213. The application 213 further includes a user interface(I/F) control unit 209, a scanner control unit 210, a printer controlunit 211, and the local access control unit 212. The user I/F controlunit 209 displays a screen on the operation unit 106 via the operationunit I/F 105, and receives a user operation from the operation unit 106.

The local access control unit 212 performs various processing based onthe user operation received from the user I/F control unit 209, anddisplays the processing result on the operation unit 106 via the userI/F control unit 209. For example, when it is requested via the user I/Fcontrol unit 209 to read from the scanner 108, the scanner control unit210 is requested to perform the reading of the document, and thedocument is read from the scanner 108 via the device I/F 107. Whenprinting request is made via the user I/F control unit 209, the printingis requested to the printer control unit 211, and the printer 109executes the printing via the device I/F 107. It is requested to thedata access processing section 204 to store data which is read andgenerated from the scanner 108 or to obtain data to be printed by theprinter 109.

The data access processing section 204 performs processing similar tothat on the network server 201. When authentication is required toaccess the data access processing section 204, the authentication isrequested to the authentication control unit 203 from the local accesscontrol unit 212. Processing of the authentication control unit 203 issimilar to that on the network server 201. In FIG. 2, only the dataaccess processing is specially illustrated and a configuration exceptfor the network server 201 and the application 213 is not illustrated.

A description will now be given of a folder structure in the storagedevice 215 in the data processing apparatus 1 according to the presentexemplary embodiment with reference to FIG. 3. FIG. 3 schematicallyillustrates structures of the files and the folders included in thestorage device 215. As will be understood with reference to FIG. 3, thefiles and the folders have a layered structure, and are stored as datain the storage device 215. Under a root folder, there are a share(d)folder and a users folder. Under the share folder, there is a foofolder. Further, under the foo folder, there are an (a.jpeg) file and a(b.jpeg) file. Just under the users folder, folders are classified inrelation to users authenticated by the authentication control unit 203.

According to the present exemplary embodiment, the user DB 214 storesinformation on tanaka, yamada, suzuki, and arai as user names. Thestorage device 215 administrates a tanaka folder, a yamada folder, asuzuki folder, and an arai folder related to the user information. Thatis, the tanaka folder has a relation to the user tanaka. The yamadafolder has a relation to the user yamada. The suzuki folder has arelation to the user suzuki. The arai folder has a relation to the userarai.

Similarly, a description is given of the access authority set to thefiles and the folders with reference to FIG. 3. The files and thefolders stored in the storage device 215 have an access control list(ACL) for controlling the access authority of the users authenticated bythe authentication control unit 203, and determines whether the user canaccess the file or folder according to the ACL. Specifically, accessauthority writable/readable (RW) from/to the user tanaka is set to the(a.jpeg) file stored in the foo folder. The access authority readable bythe user suzuki is also set to the (a.jpeg) file stored in the foofolder. In other words, no user except for the user tanaka can write tothe (a.jpeg) file and only users tanaka and suzuki can read the (a.jpeg)file. The access authority is set to the (b.jpeg) file for all theusers.

The ACL accessible only by the individual users is set to the folders ofeach user stored under the users folder. Further, the ACL accessibleonly by the corresponding user is set also to files and folderspositioned under the folders of each user. For example, to folders,/users/tanaka, the ACL accessible only by the user tanaka is set.

The ACL may be individually set to the file or folder without dividingthe folders into the share folder or the users folder. FIG. 3illustrates the share folder and the users folder. Irrespective of howthe file and folder positioned under the share folder and the usersfolder are stored, the access authority may be properly set to thefolder or file.

According to the present exemplary embodiment, as a method for accesscontrol different from the ACL, the setting or non-setting of theadministrator authority is made for each authenticated user.

A general user without the administrator authority, i.e., specialauthority, accesses the file or folder according to the ACL. Morespecifically, the user who logs in and then is authenticated by theauthentication control unit 203 can access only the file and folder towhich the access authority is set.

On the other hand, the user with the administrator authority, in otherwords, the user capable of operating the folder or file relating toanother user can perform an operation such as maintenance includingdeletion of the file in the storage device 215. The user with theadministrator authority can access the file or folder, irrespective ofwhether or not the access authority is set by the ACL. Morespecifically, the user with the administrator authority can access eventhe data to which he has no access authority.

FIG. 4 illustrates a data structure of the information stored in theuser DB 214 of the storage device 215. A description is given of theadministrator authority set to each user in the user DB 214 withreference to FIG. 4. According to the present exemplary embodiment, theuser yamada has the administrator authority, and other users do not havethe administrator authority. The user yamada can thus also, for example,perform an operation for deleting an unnecessary file when the capacityof the storage device 215 runs short, in addition to the print operationof the file stored in the folder of the user yamada or the storageoperation of the document. Since the user yamada has the administratorauthority, as illustrated in FIG. 3, the user yamada can access the(a.jpeg) file although the ACL does not have a description forpermitting the access of the user yamada.

According to the present exemplary embodiment, the user having theadministrator authority can access the folders and files of all users.The user having the administrator authority can perform all operations(reading, writing, and deletion) on all data in the file system in FIG.3. However, the user having the administrator authority may notnecessarily be able to access the folders and files of all users, butmay only be able to access the folder or file of a specific user otherthan him. While the user having the administrator authority cannot readcontents of data, a specific operation may be performed such as deletingthe data.

A plurality of different administrator authorities can be set as users.For example, the authority for performing all operations is set as thefirst administrator authority. Further, the authority for performingonly the deletion is set as the second administrator authority and theauthority for creating the folder is set as the third administratorauthority. In other words, the authority for performing only a specificoperation is set as the administrator authority.

A description will now be given of processing to be performed by thedata processing apparatus 1 that receives a request for obtaining thefolder information with reference to a flowchart in FIG. 5. A programfor executing steps in the flowchart in FIG. 5 is stored in the HDD 104or the ROM 103 of the data processing apparatus 1. Further, the programis loaded to the RAM 102, and is executed by the CPU 101.

The processing in the flowchart in FIG. 5 starts upon receiving arequest for displaying the folder or the file contained in the folderdesignated by the user, from the external device 2 or the operation unit106. It is assumed that the authentication control unit 203 has endedthe user authentication before starting the flowchart.

In step S501, the data access processing section 204 receives therequest of the folder information. According to the present exemplaryembodiment, when the request of the folder information is made,information (hereinafter, simply referred to as “folder information”) onthe folder or the file included in the designated folder is to beobtained. The request of the folder information includes the path of thefolder, the user name, the setting or non-setting of the administratorauthority, and the request source. The path of the folder is informationindicating the storage position of the file stored in the storage device215. The user authenticated by the authentication control unit 203designates the path of the folder.

The request source included in the folder information is the networkaccess control unit 208 or the local access control unit 212. In thesubsequent description, if the request is received from the networkaccess control unit 208, the request is referred to as a “network accessrequest”. If the request is received from the local access control unit212, the request is referred to as a “local access request”.

In step S502, the data access processing section 204 checks the path ofthe folder included in the request of the folder information received instep S501, and obtains the access authority set to the path of thefolder, from the ACL.

In step S503, the data access processing section 204 determines whetherthe access authority is set to the user name included in the request ofthe folder information received in step S501. When the data accessprocessing section 204 determines that the access authority is not set(NO in step S503), the processing advances to step S504. In step S504,the data access processing section 204 sends back an error messagenotifying that the access to the designated folder is impossible, to thenetwork access control unit 208 or the local access control unit 212 asthe request source. On the other hand, when the data access processingsection 204 determines that the access authority is set to thedesignated folder (YES in step S503), the processing proceeds to stepS505. Although not illustrated, even if the access authority to the username included in the request of the folder information is not set, inthe case of the access from the user having the administrator authority,the processing advances to step S505.

In step S505, the data access processing section 204 determines whetherthe designated folder is the users folder by checking the path of thefolder included in the request of the folder information received instep S501. When the data access processing section 204 determines thatthe designated folder is the users folder (YES in step S505), theprocessing proceeds to step S507. When the data access processingsection 204 determines that the designated folder is not the usersfolder (NO in step S505), the processing proceeds to step S506. In stepS506, the data access processing section 204 obtains all folderinformation (or all file information) stored just under the designatedfolder from the storage device 215, and sends back all folderinformation (or all file information) to the request source. The folderinformation includes a type, a name, a data size, and an updating date.

In the case of the network access request (so a request from an externaldevice connected via a network), the network access control unit 208transmits a packet including the folder information to the externaldevice 2, and the display device 3 in the external device 2 displays thefolder information. In the case of the local access request, the localaccess control unit 212 as the request source displays the folderinformation on the operation unit 106. As the display of the folderinformation, as described below, only the folder name or the folderinformation together with an icon may be displayed on the operation unit106, or contents of the folder may be specifically displayed.

In step S507, the data access processing section 204 determines whetherthe user who requests the folder information has the administratorauthority by checking the setting or non-setting of the administratorauthority included in the request of the folder information received instep S501. When it is determined that the requesting user has theadministrator authority (YES in step S507), the processing proceeds tostep S508. When it is determined that the requesting user does not havethe administrator authority, in other words, the requesting user is ageneral user (NO in step S507), the processing proceeds to step S509.Instep S509, the data access unit 218 checks the user name included inthe request of the folder information received in step S501. Further,the data access unit 218 selects only the folder information of thechecked user to which name the access authority is set, from the storagedevice 215 (HDD 104), and sends back the folder information on theselected user to the request source. Therefore, when the requesting useris a general user (NO in step S507), only the folder of the requestinguser is displayed on the operation unit 106 or the display device 3.

According to the present exemplary embodiment, a folder inaccessible tothe general user is not displayed. Accordingly, as its effect, it iseasy to find the folder as an operation target.

In step S508, the data access processing section 204 determines whetherthe request is a local access request or a network access request, bychecking the information on the request source included in the requestof the folder information received in step S501. When it is determinedthat the request is a local request (YES in step S508), the processingadvances to step S510. When it is determined that the request is fromthe network (NO in step S508), the processing proceeds to step S509.

The determination in step S508 is made by determining whether therequest is from the operation unit 106 or from another device on thenetwork (that is, determining the request source). In place of makingsuch a determination, the determination in step S508 may be made byidentifying a communication protocol under which the request is made.For example, when the request of the folder information is received witha hypertext transfer protocol (HTTP), the determination may be NO instep S508. And when the request of the folder information is receivedunder a protocol other than the HTTP, the determination may be YES instep S508.

In step S509, the data access processing section 204 obtains the username included in the request of the folder information, and selects onlythe folder information in which the access authority described in theACL is set to the obtained user name. The application 213 displays thefolder information of the selected user name on the operation unit 106.The user having the administrator authority can access folders of allusers, regardless of whether the access authority is set in the ACL.However, in the case of the local access request for the folderinformation, only the folder of the user is displayed.

In step S510, the data access processing section 204 obtains the folderinformation of all users from the storage device 215 (HDD 104),independently of the user name included in the request of the folderinformation received in step S501, and generates a list of the folderinformation of all users. The data access processing section 204 sendsback the generated list of information to the request source, and theuser I/F control unit 209 displays the list of the folder information onthe operation unit 106. The folder information of all users is displayedin step S510 because, when the access request of the user having theadministrator authority is received from network, the administratorauthority (authority accessible to folders of all users) is used,instead of the description of the ACL.

In step S509, control is performed to select the folder information ofthe user to which the access authority is set and display the selectedfolder information. Alternatively, in place of switching the displaydepending on the setting or non-setting of the access authority, thedisplay of the folder may be switched by another method. For example, ifa layer structure of the folders is classified depending on users, whenthe user name included in the request of the received folder informationmatches the file name included in the designated folder or the foldername, only the folder of the matching name may be displayed as thefolder information of the requesting user. Further, as another method,the folder information of the requesting user may be displayed based ona folder creator or another setting made to the folder.

In step S509, the same processing is performed both when the requestinguser of the folder information does not have the administrator authority(NO in step S507) and when the requesting user of the folder informationhas the administrator authority and the request is a local accessrequest (YES in step S507). Alternatively, individual processing may beperformed depending on the results in step S507.

In step S510, the folder information of all users is displayed inaddition to the folder information of the user who requests the folderinformation. Alternatively, the folder information of all users is notdisplayed, but only specific folder information may be displayed. Forexample, if authority for deleting the folder is set as theadministrator authority, only a deletable folder may be displayed. Morespecifically, only folder information operable under the administratorauthority may be displayed.

The display switching in the case where the designated users folder is ausers folder, is described with reference to the flowchart in FIG. 5 forconvenience of explanation. Alternatively, the display may be switchedalso in the case of the folder other than the users folder depending onthe request source and the setting or non-setting of the administratorauthority.

FIGS. 6A to 6D illustrate examples of a display screen on the operationunit 106 or the display device 3 according to a response result to therequest of the folder information.

FIG. 6A illustrates an example of the operation screen displayed on thedisplay device 3 in the external device 2 when the general user tanakaobtains a list of the users folder via the network from the externaldevice 2 with the SMB. In this case, the list of folder is requestedfrom the network, and the administrator authority is not set. Therefore,only the tanaka folder is displayed. A folder of another user to whichthe access authority is not set, is not displayed to the general usertanaka.

FIG. 6B illustrates an example of the operation screen displayed on theoperation unit 106 when the general user tanaka obtains the list ofusers folder from the operation unit 106. In this case, the list offolder is requested locally (so not via a network), and theadministrator authority is not set. Therefore similarly, only the tanakafolder is displayed.

FIG. 6C illustrates an example of the displayed operation screen on thedisplay device 3 in the external device 2 when the list of users folderis obtained via the network from the external device 2 with the SMB bythe user yamada having the administrator authority. In this case, theadministrator authority is set and the folders of all users aredisplayed independently whether the access authority is set to thefolder stored just under the users folder. The displayed folders can beaccessed. More specifically, in a case of operation on the network, theoperation possible only for the user having administrator authority,e.g., deletion of the file included in the designated folder can beperformed in an environment where the operability is higher than thatobtained in the operation unit 106 of the data processing apparatus 1.

FIG. 6D illustrates an example of the operation screen displayed on theoperation unit 106 when the list of users folder is obtained from theoperation unit 106 by the user yamada having the administratorauthority. In this case, although the administrator authority is set,the list of folder is requested locally (so in a local access request).As a consequence, only the folder yamada is displayed. When the userhaving the administrator authority operates the operation unit 106 inthe data processing apparatus 1, it becomes easier to use the print andscanner functions as main functions of the data processing apparatus 1without viewing a folder of another user. As its effect, it is alsoprevented to carelessly operate a folder of another user.

Further, when executing an administrator operation (e.g., an operationfor virus check or restoring of a damaged file), in many cases anapplication capable of realizing the administrator operation is loadedto an external device. Even if a folder or file of another user isdisplayed, the administrator operation is not usefully performed on theoperation unit 106. Accordingly, as its effect, a file which theadministrator cannot usefully operate is not displayed, which improvesthe operability on the operation unit 106 in the data processingapparatus 1.

The example in FIG. 6D illustrates the display of only the folder of theuser yamada having the administrator authority. Alternatively, if thefolder yamada is displayed being distinguished from other folders or thefolder yamada is preferentially displayed compared to other folders,both the folder yamada and a folder of another user may be displayed.

According to the present exemplary embodiment, when the folderinformation is requested in response to the access request from network,the display device 3 displays the folder information. When a screenregion of the display device 3 is wider than that of the operation unit106, even if a folder of another user is displayed, the operability doesnot deteriorate.

According to the present exemplary embodiment, as illustrated in theoperation screen in FIG. 6D, a scan button or a print button isdisplayed. When the scanned image is stored in user's own folder or adocument in user's own folder is printed, a folder of another user isnot displayed. Therefore, user's own folder is immediately searched anda user interface showing high operability can be achieved.

FIG. 7 illustrates a flowchart of processing starting after displayingthe operation screen in FIG. 6D in the data processing apparatus 1. Aprogram for executing steps in the flowchart is stored in the HDD 104 orthe ROM 103 of the data processing apparatus 1. Further, the program isstored in the RAM 102, and is executed by the CPU 101.

In step S701, the user I/F control unit 209 receives the operation fromthe operator via the operation screen displayed on the operation unit106.

In step S702, the data access processing section 204 determines, basedon an instruction received from the user I/F control unit 209, whetherthe operator selects the administrator mode. When the data accessprocessing section 204 determines that the operator selects theadministrator mode (YES in step S702), the processing proceeds to stepS703. In step S703, the application 213 that receives a reply displaysthe folder information of all users on an operation screen in FIG. 8 onthe operation unit 106. FIG. 8 illustrates the operation screendisplayed when the user yamada having the administrator authorityselects the administrator mode locally (so via the operation unit 106).An administrator mode button is switched to a general-user mode button,thereby displaying the folder information other than the user yamadahaving the administrator authority.

In step S704, the data access processing section 204 determines whetherthe operator has instructed a scan operation. When the data accessprocessing section 204 determines that the operator has instructed thescan operation (YES in step S704), in step S705, the scanner controlunit 210 reads the document with the scanner 108, and performsprocessing for storing the image in the storage device 215. According tothe present exemplary embodiment, the display of the operation screen inFIG. 6D enables selection of both a button for the scan operation by theoperator and a folder for storing the image data as the file on the sameoperation screen. As a result, the operator having the administratorauthority can easily find the folder as a target of the scan operation.Further, after selecting the folder as the operation target, the scanner108 can perform the scan processing without shifting to another deviceafter setting the document.

In step S706, the data access processing section 204 determines whetherthe operator has instructed the printing. When the data accessprocessing section 204 determines that the operator has instructed theprinting (YES in step S706), in step S707, the printer control unit 211outputs the selected file to the printer 109 via the device I/F 107 toprint an image.

When the data access processing section 204 determines that the operatordoes not instruct the printing (NO in step S706), in step S708, anotherprocessing is executed. Then, the processing in the flowchart in FIG. 7ends.

In the processing in steps S702 and S703 in FIG. 7, even if the folderinformation is requested locally by the user having the administratorauthority, the folder information of all users can be displayed byselecting the administrator mode on the operation screen displayed onthe operation unit 106.

As a result, even if the communication between the network and the dataprocessing apparatus 1 is disconnected, or even if the data processingapparatus 1 does not use the file shared protocol of the SMB, it ispossible to perform maintenance of a folder of another user.

According to the present exemplary embodiment, even in (under) anenvironment where the network is not accessed or an environmentprohibiting the sharing of file(s) even if the network can be accessed,it is possible to accomplish an operation possible only for the userhaving the administrator authority. Since the mode can be selected, thedisplay can be properly switched depending on whether the user performsan operation for scanning (or print operation) or the operation such asmaintenance. Further, it is possible to switch between the administratormode for displaying the folders of all users and the general-user modefor displaying only the user's own folder. Therefore, even when thefunction of the data processing apparatus 1 is used, the user can easilyaccess their own folder and the convenience does not deteriorate.

In place of using the file shared protocol of the SMB, the folder listmay be obtained under a protocol of a web distributed authoring andversioning (Web DAV). Further, both functions of the SMB file sharedprotocol and the Web DAV protocol may be provided, and the user maydesignate which protocol is to be used in response to the request forthe list of files.

According to the present exemplary embodiment, the folder information isdisplayed as an example. Alternatively, information of the file may bedisplayed, e.g., a file name, a file format, a creator of the file, orupdating date of the file.

According to the first exemplary embodiment, only the user's own folderis displayed when the user, having the administrator authority, requeststhe folder list locally. Therefore, even if an operation region on theoperation screen of the operation unit 106 is small, the target foldercan be easily found.

Further, the user having the administrator authority can view a folderof another user who requires the maintenance as well as user's ownfolder displayed on the screen.

According to the second exemplary embodiment, when the user having theadministrator authority requests the folder list, it is possible todisplay not only user's own folder but also the folder of the user whoneeds the maintenance.

First, a description is given of the case in which the user having theadministrator authority needs the maintenance.

With respect to the display screen region, the operation unit 106 in thedata processing apparatus 1 is generally smaller than the display device3. When 10,000 files are stored in the designated folder, if only 10files are displayed at a time on the operation unit 106, a scrolloperation is needed at least 1,000 times to check all files. In otherwords, the operability is low. According to the present exemplaryembodiment, a restriction is set to a number of files to be stored inone folder and the total number of folders. Specifically, the number offiles to be stored in one folder and the total number of folders arelimited to 1,000 or less.

As a result of limiting the number of files stored in one folder and thetotal number of folders, the following problem occurs. Namely, it isassumed that, as a regular operation, a received facsimile (FAX)document is automatically stored as an image file in a predeterminedfolder. When the number of files in one folder reaches an upper limit(1,000 according to the present exemplary embodiment), no more files arestored.

Therefore, when the number of files in one folder is coming close to theupper limit, the user having the administrator authority needs to notifythe user having the access authority to the folder or delete some or allof the image files stored in the folder.

Therefore, according to the present exemplary embodiment, when thefolder list is requested by the user having the administrator authority,the folder of the user who needs the maintenance is displayed inaddition to user's own folder.

A description is given of a software configuration of the dataprocessing apparatus 1 according to the second exemplary embodiment withreference to FIG. 9. The identical reference numeral is given to theidentical function unit in FIG. 2 according to the first exemplaryembodiment and a description thereof is omitted. The data accessprocessing section 204 includes a folder monitoring unit 1101. When thedata access unit 218 performs processing for creating a folder or a filein the storage device 215, the folder monitoring unit 1101 monitors thenumber of files in the folder and the total number of folders.

When the number of files in one folder and/or the total number offolders is equal to or greater than a predetermined number, it isrequested to an event transmission unit 902 to transmit an eventindicating that the number of files in the folder and/or the totalnumber of folders is a equal to or greater than the predeterminednumber. The event is issued under a specific condition to notify anothermodule in the device of a state or a situation. According to the presentexemplary embodiment, when 700 or 900 files are stored in one folder,the event is issued. The event transmission unit 902 transmits the eventto an event queue 903.

FIGS. 10A to 10C illustrate examples of events transmitted by the eventtransmission unit 902. An event in FIG. 10A illustrates that the totalnumber of files in a folder/users/suzuki/abc/xyz/ folder and folders ofthe user Suzuki reaches 700 on 25 May 2010, 11:25:52 (time difference is+9 hours). In the case of an event type (EVENT) 1201 in FIG. 10A, 700files are stored in one folder. It shows that the EVENT 1201 is issuedon a path 1204 of a user 1202, i.e., suzuki as a user name at an eventdate (date) 1203.

Similarly to FIG. 10A, FIGS. 10B and 10C illustrate attributes of eventtypes (EVENTS) 1205 and 1209, users 1206 and 1210, dates 1207 and 1211,and paths 1208 and 1212.

A description will now be given of the processing performed by the dataprocessing apparatus 1 according to the second exemplary embodiment withreference to a flowchart in FIG. 11. Referring to FIG. 11, the identicalreference numeral is given to a portion with the identical processing inFIG. 3. Further, the processing at the identical reference numeral isnot repeated. A program for executing steps in the flowchart in FIG. 11is stored in the HDD 104 or the ROM 103 in the data processing apparatus1. The program is loaded to the RAM 102 and is executed by the CPU 101.

Processing in steps S1101 to S1106 is similar to that in steps S501 toS506 of FIG. 5. Thus, a description thereof is omitted.

In step S1107, the data access processing section 204 determines whetherthe requesting user has the administrator authority by checking thesetting or non-setting of the administrator authority included in therequest of the folder information received in step S1101. When the dataaccess processing section 204 determines that the requesting user hasthe administrator authority (YES in step S1107), the processing proceedsto step S1109. When the data access processing section 204 determinesthat the requesting user does not have the administrator authority (NOin step S1107), the processing proceeds to step S1108.

In step S1108, the data access processing section 204 obtains only thefolder information of the user name included in the request of thefolder information. The obtained folder information is displayed on theexternal device 2 (so on the display 3 connected thereto) or theoperation unit 106.

In step S1109, the data access processing section 204 determines whetherthe request is a local access request (so from the local access controlunit 212) or from the network, based on information on the requestsource included in the request of the folder information received instep S1101. When the data access processing section 204 determines thatthe request is a local access request (YES in step S1109), theprocessing proceeds to step S1111. When the data access processingsection 204 determines that the request is from the network (NO in stepS1109), the processing proceeds to step S1110.

In step S1110, the data access processing section 204 obtains the folderinformation of all users from the storage device 215, irrespective ofwhether the user requests the folder information, and displays thefolder list on the display device 3 connected to the external device 2.

In step S1111, the data access processing section 204 determines whetherthe event is in progress. Specifically, the data access processingsection 204 determines whether an event is stored in the event queue 903and checks whether there is an event when the 700 files are stored inone folder or an event when the 900 files are stored therein. When thedata access processing section 204 determines that there is an event isstored in the event queue 903 (YES in step S1111), the processingproceeds to step S1112. When the data access processing section 204determines that there is no event stored in the event queue 903 (NO instep S1111), the processing proceeds to step S1108.

In step S1112, the data access processing section 204 obtains the folderinformation of the user corresponding to the event determined to be inprogress in step S1111.

In step S1113, the data access unit 218 adds the event type (EVENT)obtained in step S1112 and the folder information obtained in step S1112to the folder list. Then, the data access processing section 204determines whether there is an unprocessed (desired) event in the eventqueue 903. When the data access processing section 204 determines thatthere is an unprocessed (desired) event in the event queue 903, the dataaccess processing section 204 obtains the next (desired) event. Then, instep S1112, the event is added to the folder list again. When the dataaccess processing section 204 determines that there is no unprocesseddesired event in the event queue 903, the processing proceeds to stepS1114.

When the event occurs at a layer lower than the folder of the user asshown in the event in FIG. 10A, in step S1112, the folder of the user isobtained. More specifically, in the case of the path 1204 in FIG. 10A,/users/Suzuki is obtained as the folder of the user. When there is aplurality of events for the same user, only one folder of the user isobtained. Further, when there is a plurality of different event types(EVENTS) as to the same user, an event with higher priority is set asthe event issued to the user.

The priority of the event will now be described. According to thepresent exemplary embodiment, the event is issued when 700 or 900 filesare stored in one folder. The 900 files in one folder are closer to1,000 files as the upper limit than the 700 files. Therefore, instead ofthe 700 files, the 900 files need to be processed with higher priority.Namely, the priority of the 900 files is higher than that of the 700files. Thus, depending on the event type, the priority is set.

In step S1114, the data processing unit 217 rearranges the folders inthe folder list obtained in step S1112 depending on the event type. Morespecifically, the event type with high priority is shifted to a highrank in the folder list.

In step S1115, the data access unit 218 obtains the folder informationof the user having the administrator authority from the storage device215, and adds the obtained folder information to the head of the folderlist. If the folder information of the user having the administratorauthority is already obtained in step S1002, the data access unit 218does not additionally obtain the folder information. Then, the folderinformation obtained in step S1002 is shifted to the head of the folderlist.

A specific description will now be given of the processing in stepsS1112 to S1115 with reference to FIGS. 12A to 12E. FIGS. 12A to 12Eillustrate processing for obtaining and rearranging the events in FIGS.10A to 10C. The data access processing section 204 sequentially picks upthe event from the event queue 903. First of all, the data accessprocessing section 204 obtains the event in FIG. 10A, and determinesthat the number of files stored in one folder and the number of foldersof the user suzuki is 700 or more. The data access processing section204 obtains information of the /users/suzuki folder, and adds theobtained information to the information on the folder list.

As illustrated in FIG. 12A, the folder information and the event type ofthe user suzuki are described in the information on the folder list.Then, the data access processing section 204 obtains the event in FIG.10B, and determines that the number of files stored in one folder andthe total number of folders of the user arai is 700 or more. Since thedata access processing section 204 has not obtained the folderinformation of the user aria yet, the data access processing section 204obtains the folder information of the /users/arai from the storagedevice 215, and adds the obtained folder information together with theevent type to the information on the folder list.

FIG. 12B illustrates the result of addition to the information on thefolder list. Further, the data access processing section 204 obtains theevent in FIG. 12C, and determines that the number of files stored in onefolder and the number of folders of the user arai are 900 or more. Thefolder information of the user arai has been already obtained. However,since the event type in FIG. 10C has higher priority, the event type ofthe arai folder in the information on the folder list is rewritten tothe event type having 900 files and folders which has higher priority.

FIG. 12C illustrates the resultant information on the folder list.

Since all the desired events in the event queue 903 are processed, thedata processing unit 217 rearranges the generated information on thefolder list according to the priority of the event type. Morespecifically, since the event type of the 900 files and folders hashigher priority, the event type with higher priority is shifted to ahigher rank in the information on the folder list.

FIG. 12D illustrates the resultant information on the folder list.Finally, the data access unit 218 obtains the folder information of theuser yamada who has accessed the users folder, from the storage device215, and adds the obtained folder information to the head of the folderinformation. FIG. 12E illustrates the resultant information on thefolder list.

The request reception unit 216 sends back the generated information onthe folder list in FIG. 12E to the application 213. The application 213displays the folder information on the operation unit 106 based on theinformation on the folder list. FIG. 13 illustrates a display example onthe operation unit 106.

According to the present exemplary embodiment, when the user having theadministrator authority operates the data processing apparatus 1 locally(so not via a network), it is possible to view only the folder of theuser who requests the folder information and the user who needs themaintenance without displaying the folders of all users. Since thearrangement of folders can be changed depending on the priority, theprocessing can be easily performed on the folder showing higher priority(emergency). Since user's own folder is displayed at the head whilekeeping the maintenance property, when the scanned image is stored inuser's own folder or the document in user's own folder is printed,user's own folder can be immediately found.

According to the second exemplary embodiment, the stored files and/orfolders which have exceeded a predetermined number are displayed as wellas the folder of the user having the administrator authority. Accordingto a modification example, it is possible to display the folderinformation (type, name, data size, and updating date) that has changedsince the previous access time. In this case, the folder monitoring unit1101 needs to monitor the change of the folder information and store thefolder information in the event queue 903 when the folder information ischanged.

The information on the folder list includes the event type. Therefore,when the application 213 displays the folder information on theoperation unit 106 based on the information on the folder list, adisplay method may be changed, e.g., color is changed or a character isemphasized depending on the event type.

According to the first exemplary embodiment, a button for selecting theadministrator mode may be provided on an operation screen in FIG. 13,thereby displaying the folder information of all users. When theadministrator mode is selected, without displaying user's own folderinformation (the user yamada's folder according to the present exemplaryembodiment), only folder information of another user (the user arai andthe user suzuki as a maintenance target according to the presentexemplary embodiment) may be displayed.

Other Embodiments

Aspects of the present invention can also be realized by a computer of asystem or apparatus (or devices such as a CPU or MPU) that reads out andexecutes a program recorded on a memory device to perform the functionsof the above-described embodiment(s), and by a method, the steps ofwhich are performed by a computer of a system or apparatus by, forexample, reading out and executing a program recorded on a memory deviceto perform the functions of the above-described embodiment(s). For thispurpose, the program is provided to the computer for example via anetwork or from a recording medium of various types serving as thememory device (e.g., computer-readable medium).

The present invention also provides a data processing apparatus having astorage device, the data processing apparatus comprising:

a reception unit configured to receive a request for displaying a listof a plurality of objects stored in the storage device;

a user determination unit configured to determine whether the receivedrequest is made from a user capable of operating the object related toanother user;

a network determination unit configured to determine whether thereceived request is under a network communication protocol; and

a control unit configured to send back the data of the list of theplurality of objects to a device that transmits the request, when theuser determination unit determines that the request is made from theuser capable of operating the object related to the other user and thethe network determination unit determines that the received request isunder the network communication protocol, select the object related tothe requesting user among the list of the plurality of objects, when theuser determination unit determines that the request is from the usercapable of operating the object related to the other user and thenetwork determination unit determines that the received request is notunder network communication protocol, and display a list of the selectedobject on an operation unit (106) in the data processing apparatus.

The present invention also provides a control method of a dataprocessing apparatus having a storage device, the control methodcomprising:

receiving a request for displaying a list of a plurality of objectsstored in the storage device;

determining by a user whether the received request is made from a usercapable of operating the object related to another user;

determining by the network whether the received request is under anetwork communication protocol; and

performing control to send back the data of the list of the plurality ofobjects to a device that transmits the request, when the userdetermination determines that the request is made from the user capableof operating the object related to the other user and the networkdetermination determines that the received request is under the networkcommunication protocol, select the object related to the requesting useramong the list of the plurality of objects, when the user determinationdetermines that the request is from the user capable of operating theobject related to the other user and the network determinationdetermines that the received request is not under the networkcommunication protocol, and display a list of the selected object on anoperation unit in the data processing apparatus.

While the present invention has been described with reference toexemplary embodiments, it is to be understood that the invention is notlimited to the disclosed exemplary embodiments. The scope of thefollowing claims is to be accorded the broadest interpretation so as toencompass all modifications, equivalent structures, and functions.

What is claimed is:
 1. A data processing apparatus capable ofcommunicating with an external device including a display unit via anetwork, the data processing apparatus comprising: an operation unit; astorage unit configured to store a file in such a manner that the fileis associated with a user; a first reception unit configured to receivea request, transmitted by the external device based on an instruction ofa first user having administrator authority, for transmittinginformation of a file stored in the storage unit via the network; asecond reception unit configured to receive, based on an instruction ofthe first user, a request for displaying information of a file stored inthe storage unit from the operation unit; a transmitting unit configuredto transmit, based on the first reception unit receiving the request,information of a file associated with the first user and information ofa file associated with a second user to the external device; and acontrol unit configured to perform control, based on the secondreception unit receiving the request, to display the information of thefile associated with the first user without displaying the informationof the file associated with the second user on a display unit in thedata processing apparatus.
 2. The data processing apparatus according toclaim 1, wherein the information of a file is a name of the file, a typeof the file, a data size of the file, or an update date and time of thefile.
 3. The data processing apparatus according to claim 1, wherein thesecond user is a user not having the administrator authority, whereinthe first reception unit is further configured to be capable ofreceiving a request, transmitted by the external device based on aninstruction of the second user, -for displaying information of a filestored in the storage unit, and wherein, based on the first receptionunit receiving the request, transmitted by the external device based onthe instruction of the second user, for transmitting information of afile stored in the storage unit, the transmitting unit transmits theinformation of the file associated with the second user withouttransmitting the information of the file associated with the first userto the external device.
 4. The data processing apparatus according toclaim 1, further comprising a printing unit configured to performprinting of the file associated with the first user, based on thedisplayed information of the file associated with the first user, basedon reception of a printing instruction from the first user via theoperation unit.
 5. The data processing apparatus according to claim 1,further comprising a reading unit configured to read a document,wherein, based on reception of a document reading instruction from thefirst user via the operation unit, image data of the document read bythe reading unit is stored in the storage unit as a file in such amanner that the file is associated with the first user.
 6. The dataprocessing apparatus according to claim 1, wherein the request fordisplaying information of a file stored in the storage unit, which isreceived by the second reception unit, is a request for displayinginformation of a file stored in a designated folder.
 7. The dataprocessing apparatus according to claim 1, wherein the file stored inthe storage unit is stored in a memory area accessible from the externaldevice using a file sharing protocol.
 8. The data processing apparatusaccording to claim 1, wherein the information of the file associatedwith the first user is displayed on the operation unit controlled by thecontrol unit together with a button for executing a function of the dataprocessing apparatus.
 9. A control method for a data processingapparatus capable of communicating with an external device including adisplay unit via a network, the data processing apparatus including astorage unit configured to store a file in such a manner that the fileis associated with a user, the control method comprising: receiving, asfirst receiving, a request, transmitted by the external device based onan instruction of a first user having administrator authority, fortransmitting information of a file stored in the storage unit via thenetwork; receiving, as second receiving, based on an instruction of thefirst user, a request for displaying information of a file stored in thestorage unit from an operation unit included in the data processingapparatus; transmitting, based on reception of the request by the firstreceiving, information of a file associated with the first user andinformation of a file associated with a second user to the externaldevice, and performing control, based on reception of the request by thesecond receiving, the operation unit to display the information of thefile associated with the first user without displaying the informationof the file associated with the second user on a display unit in thedata processing apparatus.
 10. A non-transitory recording medium storinga program for causing a computer to execute the control method accordingto claim
 9. 11. The data processing apparatus according to claim 1,further comprising a printing unit, wherein the control unit selects,based on the instruction of the first user, a file to be printed, fromthe information displayed by the display unit, and controls the printingunit to print the selected file.